我最近买了一个TP-LINK TL-WN722N声称支持监控模式并使用以下方式捕获任何流量的适配器Wireshark。我尝试使用监控模式在 Kali Linux 中使用以下命令，
sudo ifconfig
eth0: flags=4099<UP,BROADCAST,MULTICAST> mtu 1500
ether 00:26:22:04:49:62 txqueuelen 1000 (Ethernet)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 0 bytes 0 (0.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
device interrupt 17
lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0x10<host>
loop txqueuelen 1 (Local Loopback)
RX packets 11796 bytes 15836333 (15.1 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 11796 bytes 15836333 (15.1 MiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
wlan1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.43.189 netmask 255.255.255.0 broadcast 192.168.43.255
inet6 fe80::9dde:ace6:749e:e297 prefixlen 64 scopeid 0x20<link>
inet6 2405:205:8505:632e:e48a:55c3:960:ab39 prefixlen 64 scopeid 0x0<global>
ether ec:08:6b:16:ce:88 txqueuelen 1000 (Ethernet)
RX packets 3979 bytes 3151582 (3.0 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 3467 bytes 519376 (507.2 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
从这个输出中，我知道我的适配器被识别为无线局域网1。
sudo iwconfig
wlan1 IEEE 802.11 ESSID:"Redmi"
Mode:Managed Frequency:2.462 GHz Access Point: AC:C1:EE:BC:17:51
Bit Rate=72.2 Mb/s Tx-Power=20 dBm
Retry short limit:7 RTS thr:off Fragment thr:off
Encryption key:off
Power Management:off
Link Quality=70/70 Signal level=-37 dBm
Rx invalid nwid:0 Rx invalid crypt:0 Rx invalid frag:0
Tx excessive retries:13 Invalid misc:58 Missed beacon:0
eth0 no wireless extensions.
lo no wireless extensions.
所以，目前，适配器处于托管模式。我尝试使用以下命令打开监视器模式，
sudo airmon-ng check kill
sudo airmon-ng start wlan1
确实如此打开监控模式我可以在这里看到结果，
sudo ifconfig
eth0: flags=4099<UP,BROADCAST,MULTICAST> mtu 1500
ether 00:26:22:04:49:62 txqueuelen 1000 (Ethernet)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 0 bytes 0 (0.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
device interrupt 17
lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0x10<host>
loop txqueuelen 1 (Local Loopback)
RX packets 13672 bytes 18390290 (17.5 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 13672 bytes 18390290 (17.5 MiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
wlan1mon: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
unspec EC-08-6B-16-CE-88-00-00-00-00-00-00-00-00-00-00 txqueuelen 1000 (UNSPEC)
RX packets 1135 bytes 246511 (240.7 KiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 0 bytes 0 (0.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
和这里，
sudo iwconfig
eth0 no wireless extensions.
wlan1mon IEEE 802.11 Mode:Monitor Frequency:2.462 GHz Tx-Power=20 dBm
Retry short limit:7 RTS thr:off Fragment thr:off
Power Management:off
lo no wireless extensions.
顺便说一句，结果LSSB,
lsusb
Bus 008 Device 003: ID 0cf3:9271 Atheros Communications, Inc. AR9271 802.11n
Bus 008 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 006 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 005 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 004 Device 002: ID 0458:003a KYE Systems Corp. (Mouse Systems) NetScroll+ Mini Traveler / Genius NetScroll 120
Bus 004 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 007 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 003 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 002 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 001 Device 002: ID 0a5c:2150 Broadcom Corp. BCM2046 Bluetooth Device
Bus 001 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
这似乎是一个死路现在，我明白了断开连接来自我连接的 Wifi 网络。与网络相关的所有内容都消失在右上角。
Wireshark 没有捕获任何内容。怎么了？
答案1
没有什么是错的。切换到监视模式时丢失先前的连接是正常/预期行为。用于监控模式的 wifi PEN 在该模式下将专门用于该功能。
如果您在监控模式下需要互联网连接/远程 shell，则必须有辅助连接，例如以太网卡或第二个 USB wifi 笔。
根据输出，您使用的芯片组似乎也是正确的lsusb。
我确实怀疑你没有得到任何输出因为一旦您进入监控模式，您的远程会话就会被切断。
答案2
您可以使用这个工具XEye-tp，它会在很短的时间内将您的tp-link适配器设置为监控模式。该工具的链接：https://github.com/Engmostafa26/XEye-tp